修复重定向导致无法续期

This commit is contained in:
mtvpls
2026-01-27 16:15:09 +08:00
parent 64bedb04b6
commit 258c95f6a2
4 changed files with 45 additions and 27 deletions

View File

@@ -72,24 +72,8 @@ export async function POST(request: NextRequest) {
}
const now = Date.now();
const accessTokenAge = now - authInfo.timestamp;
const remainingAccessTime = TOKEN_CONFIG.ACCESS_TOKEN_AGE - accessTokenAge;
const refreshWindow = 15 * 60 * 1000;
if (remainingAccessTime <= 0) {
return NextResponse.json(
{ error: 'Access token expired' },
{ status: 401 }
);
}
if (remainingAccessTime > refreshWindow) {
return NextResponse.json(
{ error: 'Refresh not allowed' },
{ status: 400 }
);
}
// 只检查 Refresh Token 是否过期
if (now >= authInfo.refreshExpires) {
return NextResponse.json(
{ error: 'Refresh token expired' },
@@ -97,6 +81,8 @@ export async function POST(request: NextRequest) {
);
}
// 只要 Refresh Token 有效,就允许刷新(即使 Access Token 已过期)
const newAuthData = await refreshAccessToken(
authInfo.username,
authInfo.role,